Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS7488.roa
File: AS7488.roa (raw, json)
Hash identifier: MKSwJRI+bya2w4/KB5MKpB8oZDjbG7+fKwcufsEf//w=
Subject key identifier: F0:B0:4A:26:C2:C3:9B:3C:1F:07:88:08:E2:9F:65:AE:48:C7:80:96
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 070D2FA0D830A2A35DF2D767EBB1AB5770E17FF6
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS7488.roa
Signing time: Sun 19 Jul 2026 18:33:17 +0000
ROA not before: Sun 19 Jul 2026 18:28:17 +0000
ROA not after: Sun 18 Jul 2027 18:33:17 +0000
asID: 7488
IP address blocks: 141.11.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:0d:2f:a0:d8:30:a2:a3:5d:f2:d7:67:eb:b1:ab:57:70:e1:7f:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jul 19 18:28:17 2026 GMT
Not After : Jul 18 18:33:17 2027 GMT
Subject: CN=F0B04A26C2C39B3C1F078808E29F65AE48C78096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1c:be:67:25:fd:36:08:94:bd:4a:e2:b2:96:
c4:d3:31:02:33:fe:78:e5:e5:38:37:d0:8f:3d:7b:
16:b7:78:40:71:94:63:94:39:ed:e3:c1:3d:f9:e3:
b2:11:80:6e:3c:46:b8:64:cd:c7:90:30:dc:c7:e3:
36:16:45:e5:32:0f:c8:d0:7b:ad:90:9b:70:95:f2:
20:12:66:0c:29:8d:03:6c:e5:54:d5:ec:79:8c:aa:
de:02:89:76:f6:28:4f:fe:c3:ac:99:cf:f8:5c:78:
5d:6b:dd:c0:a2:e8:84:bf:00:4a:fe:67:b3:c9:01:
24:60:8e:f1:a3:c6:07:33:86:6a:7d:9d:17:b6:0a:
46:a9:c1:6c:0e:b1:33:ac:93:b1:5f:77:d5:ff:dd:
91:ab:91:04:93:2c:99:84:f5:15:df:8c:d3:dd:87:
a9:ed:73:8e:54:5a:e2:cf:8f:4a:2c:2f:70:49:1e:
a3:c6:51:52:89:ff:f1:3c:8a:f2:47:92:40:7a:55:
2e:45:01:a6:15:5a:ce:14:b3:fe:e4:65:f3:8e:ae:
97:07:34:24:c1:bb:7b:42:cc:b8:c7:69:75:5e:3b:
70:be:03:08:db:cf:a5:1f:3a:f0:7c:6d:9e:7c:81:
a0:bc:1b:05:31:ee:c0:f2:88:b9:93:2a:5e:00:d4:
22:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B0:4A:26:C2:C3:9B:3C:1F:07:88:08:E2:9F:65:AE:48:C7:80:96
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS7488.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.50.0/24
Signature Algorithm: sha256WithRSAEncryption
75:41:0e:8e:d7:b1:2b:9b:92:ad:30:66:dc:c4:5f:d9:68:1c:
45:5b:4c:e9:a4:6a:ad:d6:20:95:98:b7:5f:56:8a:ba:be:31:
b9:bd:e1:60:fa:29:3c:ed:1f:2d:57:b4:95:ac:81:f6:d6:63:
ce:43:cf:9a:83:ab:88:78:31:3e:01:75:3c:5f:01:e8:24:db:
20:b2:6a:55:98:dd:8b:dc:c9:9c:a4:a8:cc:36:54:2b:02:cc:
39:60:e5:7b:f4:16:7d:f3:7c:de:20:0e:37:6b:85:ee:b1:6f:
ee:56:57:66:f1:64:ee:24:20:a2:21:dc:d1:1f:08:d1:e2:98:
7c:c1:b7:7e:6f:27:6d:81:c9:40:91:64:90:3d:c7:ae:e9:60:
c0:74:eb:ec:4e:d8:66:b7:4c:31:70:d1:4f:8c:4d:ae:f7:96:
67:3e:75:94:34:81:e7:39:4f:2b:74:ad:34:c4:a9:60:d6:fe:
bb:d1:24:a3:a5:08:ea:ca:5e:59:85:5c:b9:4a:4f:45:81:76:
99:82:00:4d:07:40:8e:cc:b7:11:29:2a:a6:cb:3d:d5:90:b8:
08:28:7d:1d:35:6d:23:13:99:2a:1e:18:6b:f1:e7:b1:fa:b3:
af:c3:65:b9:9c:cb:2b:f5:e6:5c:89:6d:17:b4:68:65:7a:0e:
16:10:42:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:01:28 2026 by rpki-client